[Bridge] [PATCH] netfilter: ebtables: fix a NULL pointer dereference in ebt_do_table()

Florian Westphal
Sat, 20 Aug 2022 16:26:57 -0000

Harshit Mogalapalli <harshit.m.mogalapalli at oracle.com>
wrote:
> In ebt_do_table() function dereferencing
'private->hook_entry[hook]'
> can lead to NULL pointer dereference. So add a check to prevent that.

This looks incorrect, i.e. paperimg over the problem.

If hook_entry[hook] is NULL, how did this make it to the eval loop?

I guess ebtables lacks a sanity check on incoming ruleset?